Thirty-four people, one office, and a deliberate decision not to become two hundred. Here is what the work involves, including the parts that are hard.
Nothing here is a pipeline advert. Every one of these is a seat we need filled this year.
Lead engagements end to end, from rules of engagement through to the debrief with the client’s engineers. You will spend as much time writing as exploiting.
Write detection content against real client estates rather than a generic ruleset, and own the false-positive rate of what you ship.
Containment, eradication and the analysis that has to survive an insurer, a regulator and occasionally a courtroom.
A rotation across the offensive team, the SOC and the compliance practice. Paid, and it converts to a permanent role more often than not.
Every careers page says the same things about culture. These are the ones that actually change whether you would enjoy it here.
A finding nobody can act on is not a finding. If you dislike writing, you will dislike working here, however good your exploitation is.
One week in six for the SOC and CERT teams. It is compensated, it is rotated fairly, and it does occasionally ruin an evening.
Which means fewer engagements, more depth on each, and occasionally a quarter where the pipeline looks thin. We would rather that than staff a mandate we cannot do well.
Thirty-four people in ten years. There is no plan to be two hundred, and no equity story that depends on it.
No take-home that eats your weekend, and no unpaid day of work dressed up as a trial.
Forty-five minutes with the person who would lead you. No panel, no whiteboard.
Three hours on a problem from a real engagement, anonymised. You keep the environment afterwards.
Paid. You sit in on real work and ask anyone anything, including about money.
Within five working days either way. A no comes with the actual reason, in writing.
Write anyway. We have made a role for the right person twice, and both are still here.